openssl-web.git
2 years agoUpdates based on comments
Mark J. Cox [Wed, 26 Jan 2022 13:00:50 +0000 (13:00 +0000)]
Updates based on comments

2 years agoAdd mssing reference to SWEET32
Mark J. Cox [Mon, 17 Jan 2022 15:06:39 +0000 (15:06 +0000)]
Add mssing reference to SWEET32

2 years agoNote Verisign as a Silver sponsor
Mark J. Cox [Wed, 5 Jan 2022 08:46:03 +0000 (08:46 +0000)]
Note Verisign as a Silver sponsor

2 years agoAdd myself as BSD-riscv64 maintainer
pkubaj [Thu, 23 Dec 2021 16:27:38 +0000 (17:27 +0100)]
Add myself as BSD-riscv64 maintainer

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/285)

2 years agoUpdate PGP key with new expiration date
Kurt Roeckx [Fri, 17 Dec 2021 23:06:34 +0000 (00:06 +0100)]
Update PGP key with new expiration date

Reviewed-by: Paul Dale <pauli@openssl.org>
GH: #284

2 years agoConvert the remaining python scripts to use python 3
Richard Levitte [Tue, 14 Dec 2021 19:29:28 +0000 (20:29 +0100)]
Convert the remaining python scripts to use python 3

bin/mk-committers
bin/mk-cvepage

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/283)

2 years agoConvert bin/vulnxml2json.py to Python 3
Richard Levitte [Tue, 14 Dec 2021 17:43:17 +0000 (18:43 +0100)]
Convert bin/vulnxml2json.py to Python 3

It's starting to become impossible to install python 2 modules on
Debianesque machines, so we should move on to the new default.

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/282)

2 years agoUpdate news and add advisory for new release
Matt Caswell [Tue, 14 Dec 2021 15:50:03 +0000 (15:50 +0000)]
Update news and add advisory for new release

Reviewed-by: Richard Levitte <levitte@openssl.org>
2 years agoadded solaris64 platforms maintainers and move them from Unadopted to Community
Jan Lána [Thu, 9 Dec 2021 13:04:48 +0000 (14:04 +0100)]
added solaris64 platforms maintainers and move them from Unadopted to Community

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/281)

2 years agoAdd myself as BSD-ppc* maintainer
pkubaj [Mon, 22 Nov 2021 17:19:58 +0000 (17:19 +0000)]
Add myself as BSD-ppc* maintainer

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/278)

2 years agoDrop the roadmap
Richard Levitte [Wed, 8 Dec 2021 08:13:06 +0000 (09:13 +0100)]
Drop the roadmap

It will eventually reappear, but be a real roadmap this time.

Newsflash line added, because we had a newsflash line in 2014
when we added the roadmap.

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/web/pull/280)

2 years agoMake sure to create missing directories
Richard Levitte [Mon, 1 Nov 2021 08:47:45 +0000 (09:47 +0100)]
Make sure to create missing directories

The source/old directory tree isn't guaranteed to be there any more,
now that we have removed that copy of the tarball archive.  However,
HTML files are still produced there, so we must ensure that those
directories exist, or we'd get a build break.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/276)

2 years agoUpdate to match reality, our sources of income are sponsorship and
Mark J. Cox [Mon, 1 Nov 2021 10:14:50 +0000 (10:14 +0000)]
Update to match reality, our sources of income are sponsorship and
support contracts.

2 years agoDrop source/snapshot/README
Richard Levitte [Thu, 28 Oct 2021 07:40:27 +0000 (09:40 +0200)]
Drop source/snapshot/README

This file isn't used any more, since source/snapshot is now aliased to
$ftp/snapshot.
This README has been copied to $ftp/snapshot/.message, which is
configured as HeaderName in the system Apache configuration, and is
thus shown directly in the snapshot directory listing.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/275)

2 years agotrivial update to kick web magic
Pauli [Wed, 27 Oct 2021 22:01:05 +0000 (08:01 +1000)]
trivial update to kick web magic

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/web/pull/274)

2 years agoUpdate the release schedule following 3.0 release
Matt Caswell [Wed, 15 Sep 2021 07:16:16 +0000 (08:16 +0100)]
Update the release schedule following 3.0 release

As per OMC vote

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/263)

2 years agoReword the landing page as per OMC vote.
Pauli [Wed, 27 Oct 2021 09:24:48 +0000 (19:24 +1000)]
Reword the landing page as per OMC vote.

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/273)

2 years agoReduce bin/mk-latest to only redirect latest
Richard Levitte [Fri, 22 Oct 2021 12:50:57 +0000 (14:50 +0200)]
Reduce bin/mk-latest to only redirect latest

We rely on the system apache configuration for aliasing to /srv/ftp

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/272)

2 years agoSwitch the release directory to /srv/ftp/source
Richard Levitte [Fri, 22 Oct 2021 12:49:58 +0000 (14:49 +0200)]
Switch the release directory to /srv/ftp/source

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/272)

2 years agobin/mk-latest: Treat post 1.x.x releases right
Richard Levitte [Fri, 22 Oct 2021 11:05:00 +0000 (13:05 +0200)]
bin/mk-latest: Treat post 1.x.x releases right

The currently produced .htaccess has this RewriteRule

    RewriteRule ^openssl-3.0.0-latest.tar.gz$ openssl-3.0.0.tar.gz [L,R=302,NC]

It should really be this:

    RewriteRule ^openssl-3.0-latest.tar.gz$ openssl-3.0.0.tar.gz [L,R=302,NC]

Also, since all other scripts that handle our tarballs are passed
$(RELEASEDIR), not just 'source', so should this one.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/271)

2 years agoAdd NonStop OSS platform community maintainer.
Randall S. Becker [Thu, 21 Oct 2021 14:41:22 +0000 (10:41 -0400)]
Add NonStop OSS platform community maintainer.

GUARDIAN builds are left as unadopted.

Signed-off-by: Randall S. Becker <randall.becker@nexbridge.ca>
2 years agoRemove duplicated toolchain
Richard Levitte [Thu, 21 Oct 2021 08:14:29 +0000 (10:14 +0200)]
Remove duplicated toolchain

2 years agoUpdate the details of VMS support
Richard Levitte [Wed, 20 Oct 2021 08:19:11 +0000 (10:19 +0200)]
Update the details of VMS support

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/269)

2 years agoFix table summary title
Kurt Roeckx [Wed, 20 Oct 2021 07:40:16 +0000 (09:40 +0200)]
Fix table summary title

Reviewed-by: Tim Hudson <tjh@openssl.org>
GH: #268

2 years agoRemove duplicate
Kurt Roeckx [Wed, 20 Oct 2021 07:50:47 +0000 (09:50 +0200)]
Remove duplicate

Reviewed-by: Tim Hudson <tjh@openssl.org>
GH: #268

2 years agoUpdate info about FreeBSD and VMS
Kurt Roeckx [Wed, 20 Oct 2021 07:31:44 +0000 (09:31 +0200)]
Update info about FreeBSD and VMS

2 years agoFix spelling error
Kurt Roeckx [Wed, 20 Oct 2021 07:11:50 +0000 (09:11 +0200)]
Fix spelling error

2 years agoAdd platforms for which we have a configuartion
Kurt Roeckx [Wed, 20 Oct 2021 07:10:20 +0000 (09:10 +0200)]
Add platforms for which we have a configuartion

2 years agoUpdate the platform policy as per OMC decision
Matt Caswell [Wed, 13 Oct 2021 10:24:10 +0000 (11:24 +0100)]
Update the platform policy as per OMC decision

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/web/pull/266)

2 years agoAdd note of third party bug bounty program
Mark J. Cox [Mon, 27 Sep 2021 12:15:14 +0000 (13:15 +0100)]
Add note of third party bug bounty program

2 years agonewsflash.txt: Add link to blog about Let's encrypt root expiration
Tomáš Mráz [Mon, 13 Sep 2021 10:07:30 +0000 (12:07 +0200)]
newsflash.txt: Add link to blog about Let's encrypt root expiration

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/262)

2 years agoUpdate copyright footer.
Pauli [Sat, 11 Sep 2021 06:44:56 +0000 (16:44 +1000)]
Update copyright footer.

Reviewed-by: Mark J. Cox <mark@awe.com>
(Merged from https://github.com/openssl/web/pull/261)

2 years agoUpdate the secondary platform definition
Matt Caswell [Wed, 8 Sep 2021 11:46:23 +0000 (12:46 +0100)]
Update the secondary platform definition

Updates to the definition as per an OMC vote

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/260)

2 years agoCorrect mansidebar.html reference
Richard Levitte [Tue, 7 Sep 2021 20:38:28 +0000 (22:38 +0200)]
Correct mansidebar.html reference

2 years agoAdd dependency on Makefile on all other targets that use |releases|
Richard Levitte [Fri, 3 Sep 2021 15:14:50 +0000 (17:14 +0200)]
Add dependency on Makefile on all other targets that use |releases|

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/web/pull/258)

2 years agoMake the manpage sidebar generated from template
Richard Levitte [Fri, 3 Sep 2021 15:08:51 +0000 (17:08 +0200)]
Make the manpage sidebar generated from template

Since this is another file where the contents depend on what we release,
we make this a template alongside all other templates, which do their
thing from the definition of |releases|.

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/web/pull/258)

2 years agoUpdate newsflash for OpenSSL 3.0.0
Richard Levitte [Tue, 7 Sep 2021 12:16:54 +0000 (14:16 +0200)]
Update newsflash for OpenSSL 3.0.0

2 years agoMiscellaneous updates for the 3.0 release
Matt Caswell [Thu, 2 Sep 2021 13:05:19 +0000 (14:05 +0100)]
Miscellaneous updates for the 3.0 release

Update various pieces of text on the website to refer to 3.0 correctly.

Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/257)

2 years agoCorrect missing parenthesis
Richard Levitte [Thu, 2 Sep 2021 13:47:20 +0000 (15:47 +0200)]
Correct missing parenthesis

2 years agoTake into account the OpenSSL 3.0 branch
Richard Levitte [Tue, 31 Aug 2021 10:40:36 +0000 (12:40 +0200)]
Take into account the OpenSSL 3.0 branch

This does the necessary modifications to the Makefile to do what's
needed with a 3.0 branch.

The 3.0 branch is expected to be named 'openssl-3.0' and to be checked
out in /var/cache/openssl/checkouts/openssl-3.0 on the appropriate
machine.

Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/255)

2 years agoMerge pull request #256 from iamamoose/20210902
Mark J. Cox [Thu, 2 Sep 2021 11:22:25 +0000 (12:22 +0100)]
Merge pull request #256 from iamamoose/20210902

Add Activision Silver Sponsorship

2 years agoAdd Activision Silver sponsorship
Mark J. Cox [Thu, 2 Sep 2021 10:22:18 +0000 (11:22 +0100)]
Add Activision Silver sponsorship

2 years agoMerge pull request #254 from iamamoose/20210831sponsors
Mark J. Cox [Tue, 31 Aug 2021 09:55:38 +0000 (10:55 +0100)]
Merge pull request #254 from iamamoose/20210831sponsors

Add CarGurus sponsorship (silver)

2 years agoAdd CarGurus sponsorship (silver)
Mark J. Cox [Tue, 31 Aug 2021 09:20:05 +0000 (10:20 +0100)]
Add CarGurus sponsorship (silver)

2 years agoUpdate vulnerabilities.xml
Oleg Pekar [Thu, 26 Aug 2021 21:15:52 +0000 (00:15 +0300)]
Update vulnerabilities.xml

CLA: trivial

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/253)

2 years agoAdd link to security advisory from newsflash
Matt Caswell [Tue, 24 Aug 2021 13:59:46 +0000 (14:59 +0100)]
Add link to security advisory from newsflash

Reviewed-by: Richard Levitte <levitte@openssl.org>
2 years agoUpdates for the new release
Matt Caswell [Tue, 24 Aug 2021 12:54:40 +0000 (13:54 +0100)]
Updates for the new release

Reviewed-by: Richard Levitte <levitte@openssl.org>
2 years agoForce the production of .inc files that are produced from the personel DB
Richard Levitte [Fri, 30 Jul 2021 10:28:54 +0000 (12:28 +0200)]
Force the production of .inc files that are produced from the personel DB

We have the option to also make this depend on that database, but the
diverse scripts need to be adapted to make use of that instead of
querying the data through our REST API.  That's another piece of work.

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/252)

2 years agoUpdates newsflash for 3.0 beta2
Matt Caswell [Thu, 29 Jul 2021 15:11:36 +0000 (16:11 +0100)]
Updates newsflash for 3.0 beta2

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/251)

2 years agoFix generation of community .inc files
Richard Levitte [Tue, 27 Jul 2021 15:57:14 +0000 (17:57 +0200)]
Fix generation of community .inc files

For some reason, these files were excempt from automatic generation.
I cannot see a reason why we did this, so we restore the automatic
generation as originally planned.

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/250)

2 years agoMerge pull request #249 from iamamoose/fixpgp
Mark J. Cox [Tue, 27 Jul 2021 12:06:17 +0000 (13:06 +0100)]
Merge pull request #249 from iamamoose/fixpgp

SKS keyservers have been offline for a while, so switch to OpenPGP

2 years agoSKS keyservers have been offline for a while, so switch to
Mark J. Cox [Tue, 27 Jul 2021 11:07:40 +0000 (12:07 +0100)]
SKS keyservers have been offline for a while, so switch to
keys.openpgp.org

2 years agoSimplify the CDN purge
Richard Levitte [Tue, 27 Jul 2021 07:55:07 +0000 (09:55 +0200)]
Simplify the CDN purge

Our CDN (Akamai) purge script was run as a standalone automation, in
parallell with the automatic 'make' run.  The consequence was that the
CDN could catch a copy of our original web pages in a semi built state,
as demonstrated by openssl/openssl#16152.

The solution is the ensure that the purge is run in sequence after
everything is built.  We simplify this further by moving the actual
script into the web source.

Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/248)

2 years agoMerge pull request #246 from iamamoose/shiguredosponsor
Mark J. Cox [Thu, 15 Jul 2021 07:58:51 +0000 (08:58 +0100)]
Merge pull request #246 from iamamoose/shiguredosponsor

Add sponsor Shiguredo Inc

2 years agoAdd sponsor Shiguredo Inc
Mark J. Cox [Thu, 15 Jul 2021 07:54:51 +0000 (08:54 +0100)]
Add sponsor Shiguredo Inc

2 years agoplatform policy: add new targets
Pauli [Wed, 9 Jun 2021 02:53:31 +0000 (12:53 +1000)]
platform policy: add new targets

Allow platforms that add but do not otherwise modify configuration to be added
to LTS releases.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Mark J. Cox <mark@awe.com>
(Merged from https://github.com/openssl/web/pull/243)

2 years agoWebsite updates for the 3.0 beta1 release
Matt Caswell [Thu, 17 Jun 2021 10:10:58 +0000 (11:10 +0100)]
Website updates for the 3.0 beta1 release

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/244)

2 years agoMerge pull request #242 from iamamoose/f5sponsor
Mark J. Cox [Tue, 8 Jun 2021 09:25:55 +0000 (10:25 +0100)]
Merge pull request #242 from iamamoose/f5sponsor

Add NGINX sponsorship logo

2 years agoAdd NGINX sponsorship logo
Mark J. Cox [Tue, 8 Jun 2021 09:22:49 +0000 (10:22 +0100)]
Add NGINX sponsorship logo

2 years agobin/mk-manpages3: install more than just HTML files
Richard Levitte [Fri, 4 Jun 2021 09:31:45 +0000 (11:31 +0200)]
bin/mk-manpages3: install more than just HTML files

OpenSSL 3.0 now sports images as well.

Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/241)

3 years agoUpdate newsflash alpha17 for new release
Matt Caswell [Thu, 20 May 2021 13:37:15 +0000 (14:37 +0100)]
Update newsflash alpha17 for new release

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Mark J. Cox <mark@awe.com>
(Merged from https://github.com/openssl/web/pull/239)

3 years agoUpdates to newsflash for the alpha16 release
Matt Caswell [Thu, 6 May 2021 11:58:22 +0000 (12:58 +0100)]
Updates to newsflash for the alpha16 release

Reviewed-by: Mark J. Cox <mark@awe.com>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/238)

3 years agoMerge pull request #237 from iamamoose/fixrt
Mark J. Cox [Wed, 28 Apr 2021 13:07:16 +0000 (14:07 +0100)]
Merge pull request #237 from iamamoose/fixrt

Fix security advisory links to rt.openssl.org

3 years agoRemember we're in XML so escape &
Mark J. Cox [Wed, 28 Apr 2021 12:54:47 +0000 (13:54 +0100)]
Remember we're in XML so escape &

3 years agoWe have some old links to rt.openssl.org as advisories, just link those to the archiv...
Mark J. Cox [Wed, 28 Apr 2021 12:52:47 +0000 (13:52 +0100)]
We have some old links to rt.openssl.org as advisories, just link those to the archive version for
now, we could dump these to txt files later

3 years agoReorder the old source directory list in source/old/
Richard Levitte [Mon, 26 Apr 2021 12:02:36 +0000 (14:02 +0200)]
Reorder the old source directory list in source/old/

Change the template source/old/index.html.tt to not reverse the
received list of releases.

Change the order of releases to that template to be from newest to
oldest, and fips (the old FOM) last.

Fixes #235

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/236)

3 years agoMakefile: Missed a spot! (FUTURESERIES missing in one place)
Richard Levitte [Mon, 26 Apr 2021 10:04:00 +0000 (12:04 +0200)]
Makefile: Missed a spot!  (FUTURESERIES missing in one place)

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/234)

3 years agoMakefile: Add FUTURESERIES, for series that have no final release yet
Richard Levitte [Mon, 26 Apr 2021 09:01:06 +0000 (11:01 +0200)]
Makefile: Add FUTURESERIES, for series that have no final release yet

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/233)

3 years agobin/mk-latest: Make the adapation for the OpenSSL 3.0 version scheme work
Richard Levitte [Mon, 26 Apr 2021 08:51:53 +0000 (10:51 +0200)]
bin/mk-latest: Make the adapation for the OpenSSL 3.0 version scheme work

The attempt done in the previous commit didn't quite work out.
Current fix is to hard code 3.x series.

Fixes #229

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/232)

3 years agobin/mk-latest: Adapt .htaccess for the version scheme of OpenSSL 3.0
Richard Levitte [Mon, 26 Apr 2021 07:39:26 +0000 (09:39 +0200)]
bin/mk-latest: Adapt .htaccess for the version scheme of OpenSSL 3.0

Fixes #229

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/230)

3 years agoAdd newsflash entry for the 3.0 alpha15 release
Matt Caswell [Thu, 22 Apr 2021 13:45:44 +0000 (14:45 +0100)]
Add newsflash entry for the 3.0 alpha15 release

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/228)

3 years agosource: Fix typo in *are encouraged*
Paul Menzel [Wed, 21 Apr 2021 05:12:45 +0000 (07:12 +0200)]
source: Fix typo in *are encouraged*

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/227)

3 years agoUpdate newsflash for alpha14 release
Matt Caswell [Thu, 8 Apr 2021 09:04:43 +0000 (10:04 +0100)]
Update newsflash for alpha14 release

Reviewed-by: Mark J. Cox <mark@awe.com>
(Merged from https://github.com/openssl/web/pull/225)

3 years agobin/mk-notes: adjust regular expression for CVE IDs
Dr. Matthias St. Pierre [Tue, 16 Feb 2021 19:13:29 +0000 (20:13 +0100)]
bin/mk-notes: adjust regular expression for CVE IDs

According to [1], the CVE ID can now have more than four digits,
which actually happened for the CVEs fixed by 1.1.1j.

[1] https://cve.mitre.org/about/faqs.html#cve_id_syntax_change

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/219)

3 years agoUpdates for the 1.1.1k release
Matt Caswell [Thu, 25 Mar 2021 10:53:37 +0000 (10:53 +0000)]
Updates for the 1.1.1k release

Reviewed-by: Tim Hudson <tjh@openssl.org>
3 years agoMerge pull request #222 from iamamoose/securitypolicychange
Mark J. Cox [Tue, 16 Mar 2021 10:48:55 +0000 (10:48 +0000)]
Merge pull request #222 from iamamoose/securitypolicychange

Update security policy to note we prenotify projects like LibreSSL and BoringSSL

3 years agoVote passed, update the change date
Mark J. Cox [Tue, 16 Mar 2021 10:47:33 +0000 (10:47 +0000)]
Vote passed, update the change date

3 years agoComplete the transition changelog.txt -> changelog.md
Richard Levitte [Thu, 11 Mar 2021 15:27:33 +0000 (16:27 +0100)]
Complete the transition changelog.txt -> changelog.md

Almost a year ago, in 4b0220368e888aab29972537aff8602a45b724e9, changelog.txt
was renamed to changelog.md.  It seems, however, that we didn't make that
change complete.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/224)

3 years agoUpdate newsflash for the 3.0 alpha13 release
Matt Caswell [Thu, 11 Mar 2021 13:55:44 +0000 (13:55 +0000)]
Update newsflash for the 3.0 alpha13 release

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/223)

3 years ago"based on" could be misinterpreted as projects that simply use OpenSSL but
Mark J. Cox [Thu, 4 Mar 2021 11:07:25 +0000 (11:07 +0000)]
"based on" could be misinterpreted as projects that simply use OpenSSL but
the intent of this change is for projects that are derived from OpenSSL

3 years agoFor many years we have notified LibreSSL and BoringSSL, but we should be clear that...
Mark J. Cox [Tue, 2 Mar 2021 11:18:48 +0000 (11:18 +0000)]
For many years we have notified LibreSSL and BoringSSL, but we should be clear that we do so in the policy

3 years agoUpdate newsflash for 3.0 alpha 12 release
Matt Caswell [Thu, 18 Feb 2021 15:16:04 +0000 (15:16 +0000)]
Update newsflash for 3.0 alpha 12 release

Reviewed-by: Mark J. Cox <mark@awe.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/web/pull/220)

3 years agoFix a typo in vulnerabilities.xml
Matt Caswell [Tue, 16 Feb 2021 16:56:36 +0000 (16:56 +0000)]
Fix a typo in vulnerabilities.xml

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/218)

3 years agoUpdates for the new release
Matt Caswell [Tue, 16 Feb 2021 15:47:12 +0000 (15:47 +0000)]
Updates for the new release

Reviewed-by: Richard Levitte <levitte@openssl.org>
3 years agoMerge pull request #217 from iamamoose/sponsor
Mark J. Cox [Tue, 16 Feb 2021 15:15:10 +0000 (15:15 +0000)]
Merge pull request #217 from iamamoose/sponsor

Add new bronze level github sponsor

3 years agoMerge branch 'master' of github.com:iamamoose/openssl-web
Mark J. Cox [Tue, 16 Feb 2021 14:57:14 +0000 (14:57 +0000)]
Merge branch 'master' of github.com:iamamoose/openssl-web

3 years agoAdd new bronze level github sponsor
Mark J. Cox [Tue, 16 Feb 2021 14:51:33 +0000 (14:51 +0000)]
Add new bronze level github sponsor

3 years agoFix bin/mk-manpages3 to handle spurious & in the description
Richard Levitte [Mon, 25 Jan 2021 13:11:13 +0000 (14:11 +0100)]
Fix bin/mk-manpages3 to handle spurious & in the description

We have some pages that emit &lt; and &gt; in the NAMES description in
the HTML output.

However, we're using sed to massage a template with that description,
and & happens to be significant.  Therefore, it needs being explicitly
escaped.

Partially fixes openssl/openssl#13949

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/214)

3 years agoAdd newsflash about the release of OpenSSL 3.0 alpha11
Richard Levitte [Thu, 28 Jan 2021 13:21:50 +0000 (14:21 +0100)]
Add newsflash about the release of OpenSSL 3.0 alpha11

Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/web/pull/216)

3 years agobin/mk-notes: correct the anchor links to the CVE descriptions
Dr. Matthias St. Pierre [Tue, 8 Dec 2020 15:31:10 +0000 (16:31 +0100)]
bin/mk-notes: correct the anchor links to the CVE descriptions

from `...#<year>-<num>` to `...#CVE-<year>-<num>`.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/209)

3 years agoFix style for links containing "raw"
Etienne Millon [Mon, 4 Jan 2021 14:50:58 +0000 (15:50 +0100)]
Fix style for links containing "raw"

The stylesheet contains rules that applies to all links to urls
containing "raw". This applies to links to documentation for function
that contain this word, in such as `EVP_PKEY_new_raw_private_key`.

These rules seems to be otherwise unused, so removing them fixes the
problem.

CLA: Trivial

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/210)

3 years agoUpgrade our use of jQuery to 3.5.1
Richard Levitte [Mon, 25 Jan 2021 11:06:15 +0000 (12:06 +0100)]
Upgrade our use of jQuery to 3.5.1

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/213)

3 years agoUpdate expiration date
Kurt Roeckx [Fri, 15 Jan 2021 17:49:59 +0000 (18:49 +0100)]
Update expiration date

3 years agoAdd newsflash entry for alpha10 release
Matt Caswell [Thu, 7 Jan 2021 14:00:02 +0000 (14:00 +0000)]
Add newsflash entry for alpha10 release

Reviewed-by: Mark J. Cox <mark@awe.com>
Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com>
(Merged from https://github.com/openssl/web/pull/212)

3 years agoMerge remote-tracking branch 'gh/master'
Mark J. Cox [Mon, 4 Jan 2021 15:53:49 +0000 (15:53 +0000)]
Merge remote-tracking branch 'gh/master'

3 years agoMerge remote-tracking branch 'site/master'
Mark J. Cox [Mon, 4 Jan 2021 15:51:30 +0000 (15:51 +0000)]
Merge remote-tracking branch 'site/master'

3 years agoUpdate the Sponsorship page to remove sponsorships that have lapsed and
Mark J. Cox [Mon, 4 Jan 2021 15:29:11 +0000 (15:29 +0000)]
Update the Sponsorship page to remove sponsorships that have lapsed and
add a link to recognise the GitHub Sponsors

3 years agoCommits for new releases
Matt Caswell [Tue, 8 Dec 2020 13:45:19 +0000 (13:45 +0000)]
Commits for new releases

Reviewed-by: Richard Levitte <levitte@openssl.org>
3 years agoUpdate newsflash for new release
Matt Caswell [Thu, 26 Nov 2020 15:03:27 +0000 (15:03 +0000)]
Update newsflash for new release

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/208)

3 years agoby laws: remove the necessity for the OMC to invite committers and OTC members.
Pauli [Fri, 6 Nov 2020 12:52:00 +0000 (22:52 +1000)]
by laws: remove the necessity for the OMC to invite committers and OTC members.

It would be better if these invitations come from the OTC which does the
nominations.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Mark J. Cox <mark@awe.com>
Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Kurt Roeckx <kurt@roeckx.be>
Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
(Merged from https://github.com/openssl/openssl/pull/207)